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IN THE CLAIMS 

1 . (Previously Presented) A method for use in a device associated with a first party for 
decrypting a ciphertext according to a Cramer-Shoup based encryption scheme, the method 
comprising the steps of: 

obtaining the ciphertext in the first party device sent from a device associated with a second 
party; and 

generating in the first party device a plaintext corresponding to the ciphertext based on 
assistance from the second party device, wherein the assistance comprises an exchange of 
information between the first party device and the second party device separate from the sending of 
the ciphertext from the second party device to the first party device, the plaintext representing a 
result of the decryption according to the Cramer-Shoup based encryption scheme. 

2. (Original) The method of claim 1, wherein the generating step further comprises an 
exchange of information between the first party device and the second party device whereby at least a 
portion of the information is encrypted using an encryption technique such that one party encrypts 
information using its own public key and another party can not read the information but can use the 
information to perform an operation. 

3. (Original) The method of claim 1, wherein the generating step further comprises an 
exchange of information between the first party device and the second party device whereby at least a 
portion of the information is encrypted using an encryption technique having a homomorphic 
property, 

4. (Original) The method of claim 1, wherein the generating step further comprises: 
generating a share of a random secret; 

generating information representing encryptions of a form of the random secret, a share of a 
private key, and the ciphertext; 

transmitting at least the encrypted information to the second party device; and 
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computing the plaintext based at least on the share of the random secret, the share of the 
private key, the ciphertext, and the data received from the second party device. 

5. (Original) The method of claim 1, wherein the first party device and the second party 
device additively share components of a private key. 

6. (Original) The method of claim 1, wherein the generating step further comprises 
generation and exchange of proofs between the first party device and the second party device that 
serve to verify operations performed by each party. 

7. (Original) The method of claim 6, wherein the proofs are consistency proofs based on 
three-move S-protocols. 

8. (Currently Amended) A method for use in a device associated with a first party for 
assisting in decrypting a ciphertext according to a Cramer-Shoup based encryption scheme, the 
method comprising the steps of: 

receiving a request generated in and transmitted by a second party device for the partial 
assistance of the first party device in decrypting the ciphertext according to the Cramer-Shoup based 
encryption scheme; and 

generating results in the first party device based on the partial assistance provided thereby for 
use in the second party device to complete decryption of the ciphertext , wherein the assistance 
comprises an exchange of information between the first party device and the second party device 
separate from the sending of the ciphertext from the first party device to the second party device . 

9. (Previously Presented) Apparatus for use in a device associated with a first party for 
decrypting a ciphertext according to a Cramer-Shoup based encryption scheme, the apparatus 
comprising: 

a memory; and 
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at least one processor coupled to the memory and operative to: (i) obtain the ciphertext in the 
first party device sent from a device associated with a second party; and (ii) generate in the first party 
device a plaintext corresponding to the ciphertext based on assistance from the second party device, 
wherein the assistance comprises an exchange of information between the first party device and the 
second party device separate from the sending of the ciphertext from the second party device to the 
first party device, the plaintext representing a result of the decryption according to the Cramer-Shoup 
based encryption scheme. 

1 0. (Original) The apparatus of claim 9, wherein the generating operation further comprises 
an exchange of information between the first party device and the second party device whereby at 
least a portion of the information is encrypted using an encryption technique such that one party 
encrypts information using its own public key and another party can not read the information but can 
use the information to perform an operation. 

1 1 . (Original) The apparatus of claim 9, wherein the generating operation further comprises 
an exchange of information between the first party device and the second party device whereby at 
least a portion of the information is encrypted using an encryption technique having a homomorphic 
property. 

1 2. (Original) The apparatus of claim 9, wherein the generating operation further comprises: 
(i) generating a share of a random secret; (ii) generating information representing encryptions of a 
form of the random secret, a share of a private key, and the ciphertext; (iii) transmitting at least the 
encrypted information to the second party device; and (iv) computing the plaintext based at least on 
the share of the random secret, the share of the private key, the ciphertext, and the data received from 
the second party device. 

1 3 . (Original) The apparatus of claim 9, wherein the first party device and the second party 
device additively share components of a private key. 



4 



MacKenzie 15 



1 4. (Original) The apparatus of claim 9, wherein the generating operation further comprises 
generation and exchange of proofs between the first party device and the second party device that 
serve to verify operations performed by each party. 

15. (Original) The apparatus of claim 14, wherein the proofs are consistency proofs based 
on three-move L-protocols. 

16. (Currently Amended) Apparatus for use in a device associated with a first party for 
assisting in decrypting a ciphertext according to a Cramer-Shoup based encryption scheme, the 
apparatus comprising: 

a memory; and 

at least one processor coupled to the memory and operative to: (i) receive a request generated 
in and transmitted by a second party device for the partial assistance of the first party device in 
decrypting the ciphertext according to the Cramer-Shoup based encryption scheme; and (ii) generate 
results in the first party device based on the partial assistance provided thereby for use in the second 
party device to complete decryption of the ciphertex t wherein the assistance comprises an exchange 
of information between the first party device and the second party device separate from the sending 
of the ciphertext from the first party device to the second party device . 
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